Exploitdb Exploits
31,394 exploits tracked across all sources.
Ruby on Rails <2.1.3 & <2.2.2 - CSRF
Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass cross-site request forgery (CSRF) protection for requests to applications that rely on this protection, as demonstrated using text/plain.
by p0deje
NetBiterConfig <1.3.0 - Buffer Overflow
Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attackers to execute arbitrary code via a long hn (hostname) parameter in a crafted HICP-protocol UDP packet.
by Ruben Santamarta
Quartz Concept Content Manager 3.00 - Authentication Bypass
by Mr.aFiR
Zeecareers 2.0 - Cross-Site Scripting / Authentication Bypass
by bi0
WS Interactive Automne 4.0 - '228-recherche.php' Cross-Site Scripting
by loneferret
Uploadscript <1.2 - Info Disclosure
Uploadscript 1.2 and earlier stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain the admin password hash via a direct request for /password.txt.
by Mr.aFiR
Model Agency Manager - 'search_process.php' Cross-Site Scripting
by bi0
Joomla! Component com_virtuemart 1.0 - 'Product_ID' SQL Injection
by SOA Crew
com_jcalpro 1.5.3.6 - Remote Code Execution via mosConfig_absolute_path Parameter
PHP remote file inclusion vulnerability in cal_popup.php in the Anything Digital Development JCal Pro (aka com_jcalpro or JCP) component 1.5.3.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
by kaMtiEz
Frog CMS 0.9.5 - Cross-Site Request Forgery
by Milos Zivanovic
Chipmunk Board Script 1.x - Multiple Cross-Site Request Forgery Vulnerabilities
by Milos Zivanovic
Acc Statistics 1.1 - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change (1) passwords, (2) usernames, and (3) e-mail addresses.
by Milos Zivanovic
Acc PHP eMail 1.1 - Cross-Site Request Forgery in Password Change
Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords.
by bi0
Acc Auto Dealer Script 5.0 - Persistent Cross-Site Scripting / SQL Backup
by bi0
ZeeCareers 2.x - PHP HR Manager Website (Cross-Site Scripting / Authentication Bypass)
by bi0
gif2png <= 2.5.3 - Stack-based Buffer Overflow via Long Command-line Argument
Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via a long command-line argument, as demonstrated by a CGI program that launches gif2png.
by Razuel Akaharnath
XAMPP 1.6.8 - Cross-Site Request Forgery via xampppasswd Parameter
Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter.
by bi0
phpCollegeExchange 0.1.5c - Multiple SQL Injections
by Salvatore Fresta
oBlog - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in oBlog allow remote attackers to inject arbitrary web script or HTML via the (1) commentName, (2) commentEmail, (3) commentWeb, or (4) commentText parameter to article.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via the (5) article_id or (6) title parameter to admin/write.php, the (7) category_id or (8) category_name parameter to admin/groups.php, the (9) blogroll_id or (10) title parameter to admin/blogroll.php, or the (11) blog_name or (12) tag_line parameter to admin/settings.php.
by Milos Zivanovic
By Source